Exposures › CVE-2017-18362

CVE-2017-18362

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-05-24

Reference

https://nvd.nist.gov/vuln/detail/CVE-2017-18362

⌖ exploited in the wild shame 80/100 ransomwareexploited-in-wild

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

Players implicated

Kaseya · vendor Virtual System/Server Administrator (VSA) · product

Description

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.